@aws-cdk/cfn-property-mixins 2.243.0

package/lib/services/aws-ecr/cfn-props-mixins.generated.d.ts

@@ -0,0 +1,1003 @@
+import * as cdk from "aws-cdk-lib/core";
+import * as constructs from "constructs";
+import * as mixins from "../../mixins";
+import * as service from "aws-cdk-lib/aws-ecr";
+import { aws_ecr as ecrRefs, aws_kms as kmsRefs } from "aws-cdk-lib/interfaces";
+/**
+ * The `AWS::ECR::PublicRepository` resource specifies an Amazon Elastic Container Registry Public (Amazon ECR Public) repository, where users can push and pull Docker images, Open Container Initiative (OCI) images, and OCI compatible artifacts.
+ *
+ * For more information, see [Amazon ECR public repositories](https://docs.aws.amazon.com/AmazonECR/latest/public/public-repositories.html) in the *Amazon ECR Public User Guide* .
+ *
+ * @cloudformationResource AWS::ECR::PublicRepository
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-publicrepository.html
+ */
+export declare class CfnPublicRepositoryPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnPublicRepositoryMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::ECR::PublicRepository`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnPublicRepositoryMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnPublicRepository;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnPublicRepositoryPropsMixin {
+    /**
+     * The details about the repository that are publicly visible in the Amazon ECR Public Gallery.
+     *
+     * For more information, see [Amazon ECR Public repository catalog data](https://docs.aws.amazon.com/AmazonECR/latest/public/public-repository-catalog-data.html) in the *Amazon ECR Public User Guide* .
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-publicrepository-repositorycatalogdata.html
+     */
+    interface RepositoryCatalogDataProperty {
+        /**
+         * The longform description of the contents of the repository.
+         *
+         * This text appears in the repository details on the Amazon ECR Public Gallery.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-publicrepository-repositorycatalogdata.html#cfn-ecr-publicrepository-repositorycatalogdata-abouttext
+         */
+        readonly aboutText?: string;
+        /**
+         * The architecture tags that are associated with the repository.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-publicrepository-repositorycatalogdata.html#cfn-ecr-publicrepository-repositorycatalogdata-architectures
+         */
+        readonly architectures?: Array<string>;
+        /**
+         * The operating system tags that are associated with the repository.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-publicrepository-repositorycatalogdata.html#cfn-ecr-publicrepository-repositorycatalogdata-operatingsystems
+         */
+        readonly operatingSystems?: Array<string>;
+        /**
+         * The short description of the repository.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-publicrepository-repositorycatalogdata.html#cfn-ecr-publicrepository-repositorycatalogdata-repositorydescription
+         */
+        readonly repositoryDescription?: string;
+        /**
+         * The longform usage details of the contents of the repository.
+         *
+         * The usage text provides context for users of the repository.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-publicrepository-repositorycatalogdata.html#cfn-ecr-publicrepository-repositorycatalogdata-usagetext
+         */
+        readonly usageText?: string;
+    }
+}
+/**
+ * Properties for CfnPublicRepositoryPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-publicrepository.html
+ */
+export interface CfnPublicRepositoryMixinProps {
+    /**
+     * The details about the repository that are publicly visible in the Amazon ECR Public Gallery.
+     *
+     * For more information, see [Amazon ECR Public repository catalog data](https://docs.aws.amazon.com/AmazonECR/latest/public/public-repository-catalog-data.html) in the *Amazon ECR Public User Guide* .
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-publicrepository.html#cfn-ecr-publicrepository-repositorycatalogdata
+     */
+    readonly repositoryCatalogData?: any | cdk.IResolvable;
+    /**
+     * The name to use for the public repository.
+     *
+     * The repository name may be specified on its own (such as `nginx-web-app` ) or it can be prepended with a namespace to group the repository into a category (such as `project-a/nginx-web-app` ). If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the repository name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) .
+     *
+     * > If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-publicrepository.html#cfn-ecr-publicrepository-repositoryname
+     */
+    readonly repositoryName?: string;
+    /**
+     * The JSON repository policy text to apply to the public repository.
+     *
+     * For more information, see [Amazon ECR Public repository policies](https://docs.aws.amazon.com/AmazonECR/latest/public/public-repository-policies.html) in the *Amazon ECR Public User Guide* .
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-publicrepository.html#cfn-ecr-publicrepository-repositorypolicytext
+     */
+    readonly repositoryPolicyText?: any | cdk.IResolvable;
+    /**
+     * An array of key-value pairs to apply to this resource.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-publicrepository.html#cfn-ecr-publicrepository-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+}
+/**
+ * The `AWS::ECR::PullThroughCacheRule` resource creates or updates a pull through cache rule.
+ *
+ * A pull through cache rule provides a way to cache images from an upstream registry in your Amazon ECR private registry.
+ *
+ * @cloudformationResource AWS::ECR::PullThroughCacheRule
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html
+ */
+export declare class CfnPullThroughCacheRulePropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnPullThroughCacheRuleMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::ECR::PullThroughCacheRule`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnPullThroughCacheRuleMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnPullThroughCacheRule;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnPullThroughCacheRulePropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html
+ */
+export interface CfnPullThroughCacheRuleMixinProps {
+    /**
+     * The ARN of the Secrets Manager secret associated with the pull through cache rule.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html#cfn-ecr-pullthroughcacherule-credentialarn
+     */
+    readonly credentialArn?: string;
+    /**
+     * The ARN of the IAM role associated with the pull through cache rule.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html#cfn-ecr-pullthroughcacherule-customrolearn
+     */
+    readonly customRoleArn?: string;
+    /**
+     * The Amazon ECR repository prefix associated with the pull through cache rule.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html#cfn-ecr-pullthroughcacherule-ecrrepositoryprefix
+     */
+    readonly ecrRepositoryPrefix?: string;
+    /**
+     * The name of the upstream source registry associated with the pull through cache rule.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html#cfn-ecr-pullthroughcacherule-upstreamregistry
+     */
+    readonly upstreamRegistry?: string;
+    /**
+     * The upstream registry URL associated with the pull through cache rule.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html#cfn-ecr-pullthroughcacherule-upstreamregistryurl
+     */
+    readonly upstreamRegistryUrl?: string;
+    /**
+     * The upstream repository prefix associated with the pull through cache rule.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pullthroughcacherule.html#cfn-ecr-pullthroughcacherule-upstreamrepositoryprefix
+     */
+    readonly upstreamRepositoryPrefix?: string;
+}
+/**
+ * The `AWS::ECR::RegistryPolicy` resource creates or updates the permissions policy for a private registry.
+ *
+ * A private registry policy is used to specify permissions for another AWS account and is used when configuring cross-account replication. For more information, see [Registry permissions](https://docs.aws.amazon.com/AmazonECR/latest/userguide/registry-permissions.html) in the *Amazon Elastic Container Registry User Guide* .
+ *
+ * @cloudformationResource AWS::ECR::RegistryPolicy
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-registrypolicy.html
+ */
+export declare class CfnRegistryPolicyPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnRegistryPolicyMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::ECR::RegistryPolicy`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnRegistryPolicyMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnRegistryPolicy;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnRegistryPolicyPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-registrypolicy.html
+ */
+export interface CfnRegistryPolicyMixinProps {
+    /**
+     * The JSON policy text for your registry.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-registrypolicy.html#cfn-ecr-registrypolicy-policytext
+     */
+    readonly policyText?: any | cdk.IResolvable;
+}
+/**
+ * The `AWS::ECR::ReplicationConfiguration` resource creates or updates the replication configuration for a private registry.
+ *
+ * The first time a replication configuration is applied to a private registry, a service-linked IAM role is created in your account for the replication process. For more information, see [Using Service-Linked Roles for Amazon ECR](https://docs.aws.amazon.com/AmazonECR/latest/userguide/using-service-linked-roles.html) in the *Amazon Elastic Container Registry User Guide* .
+ *
+ * > When configuring cross-account replication, the destination account must grant the source account permission to replicate. This permission is controlled using a private registry permissions policy. For more information, see `AWS::ECR::RegistryPolicy` .
+ *
+ * @cloudformationResource AWS::ECR::ReplicationConfiguration
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-replicationconfiguration.html
+ */
+export declare class CfnReplicationConfigurationPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnReplicationConfigurationMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::ECR::ReplicationConfiguration`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnReplicationConfigurationMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnReplicationConfiguration;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnReplicationConfigurationPropsMixin {
+    /**
+     * The replication configuration for a registry.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-replicationconfiguration-replicationconfiguration.html
+     */
+    interface ReplicationConfigurationProperty {
+        /**
+         * An array of objects representing the replication destinations and repository filters for a replication configuration.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-replicationconfiguration-replicationconfiguration.html#cfn-ecr-replicationconfiguration-replicationconfiguration-rules
+         */
+        readonly rules?: Array<cdk.IResolvable | CfnReplicationConfigurationPropsMixin.ReplicationRuleProperty> | cdk.IResolvable;
+    }
+    /**
+     * An array of objects representing the replication destinations and repository filters for a replication configuration.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-replicationconfiguration-replicationrule.html
+     */
+    interface ReplicationRuleProperty {
+        /**
+         * An array of objects representing the destination for a replication rule.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-replicationconfiguration-replicationrule.html#cfn-ecr-replicationconfiguration-replicationrule-destinations
+         */
+        readonly destinations?: Array<cdk.IResolvable | CfnReplicationConfigurationPropsMixin.ReplicationDestinationProperty> | cdk.IResolvable;
+        /**
+         * An array of objects representing the filters for a replication rule.
+         *
+         * Specifying a repository filter for a replication rule provides a method for controlling which repositories in a private registry are replicated.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-replicationconfiguration-replicationrule.html#cfn-ecr-replicationconfiguration-replicationrule-repositoryfilters
+         */
+        readonly repositoryFilters?: Array<cdk.IResolvable | CfnReplicationConfigurationPropsMixin.RepositoryFilterProperty> | cdk.IResolvable;
+    }
+    /**
+     * The filter settings used with image replication.
+     *
+     * Specifying a repository filter to a replication rule provides a method for controlling which repositories in a private registry are replicated. If no filters are added, the contents of all repositories are replicated.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-replicationconfiguration-repositoryfilter.html
+     */
+    interface RepositoryFilterProperty {
+        /**
+         * The repository filter details.
+         *
+         * When the `PREFIX_MATCH` filter type is specified, this value is required and should be the repository name prefix to configure replication for.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-replicationconfiguration-repositoryfilter.html#cfn-ecr-replicationconfiguration-repositoryfilter-filter
+         */
+        readonly filter?: ecrRefs.IRepositoryRef | string;
+        /**
+         * The repository filter type.
+         *
+         * The only supported value is `PREFIX_MATCH` , which is a repository name prefix specified with the `filter` parameter.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-replicationconfiguration-repositoryfilter.html#cfn-ecr-replicationconfiguration-repositoryfilter-filtertype
+         */
+        readonly filterType?: string;
+    }
+    /**
+     * An array of objects representing the destination for a replication rule.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-replicationconfiguration-replicationdestination.html
+     */
+    interface ReplicationDestinationProperty {
+        /**
+         * The Region to replicate to.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-replicationconfiguration-replicationdestination.html#cfn-ecr-replicationconfiguration-replicationdestination-region
+         */
+        readonly region?: string;
+        /**
+         * The AWS account ID of the Amazon ECR private registry to replicate to.
+         *
+         * When configuring cross-Region replication within your own registry, specify your own account ID.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-replicationconfiguration-replicationdestination.html#cfn-ecr-replicationconfiguration-replicationdestination-registryid
+         */
+        readonly registryId?: string;
+    }
+}
+/**
+ * Properties for CfnReplicationConfigurationPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-replicationconfiguration.html
+ */
+export interface CfnReplicationConfigurationMixinProps {
+    /**
+     * The replication configuration for a registry.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-replicationconfiguration.html#cfn-ecr-replicationconfiguration-replicationconfiguration
+     */
+    readonly replicationConfiguration?: cdk.IResolvable | CfnReplicationConfigurationPropsMixin.ReplicationConfigurationProperty;
+}
+/**
+ * The `AWS::ECR::Repository` resource specifies an Amazon Elastic Container Registry (Amazon ECR) repository, where users can push and pull Docker images, Open Container Initiative (OCI) images, and OCI compatible artifacts.
+ *
+ * For more information, see [Amazon ECR private repositories](https://docs.aws.amazon.com/AmazonECR/latest/userguide/Repositories.html) in the *Amazon ECR User Guide* .
+ *
+ * @cloudformationResource AWS::ECR::Repository
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html
+ */
+export declare class CfnRepositoryPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnRepositoryMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::ECR::Repository`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnRepositoryMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnRepository;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnRepositoryPropsMixin {
+    /**
+     * The image scanning configuration for a repository.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-imagescanningconfiguration.html
+     */
+    interface ImageScanningConfigurationProperty {
+        /**
+         * The setting that determines whether images are scanned after being pushed to a repository.
+         *
+         * If set to `true` , images will be scanned after being pushed. If this parameter is not specified, it will default to `false` and images will not be scanned unless a scan is manually started.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-imagescanningconfiguration.html#cfn-ecr-repository-imagescanningconfiguration-scanonpush
+         */
+        readonly scanOnPush?: boolean | cdk.IResolvable;
+    }
+    /**
+     * The encryption configuration for the repository. This determines how the contents of your repository are encrypted at rest.
+     *
+     * By default, when no encryption configuration is set or the `AES256` encryption type is used, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts your data at rest using an AES256 encryption algorithm. This does not require any action on your part.
+     *
+     * For more control over the encryption of the contents of your repository, you can use server-side encryption with AWS Key Management Service key stored in AWS Key Management Service ( AWS  ) to encrypt your images. For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide* .
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-encryptionconfiguration.html
+     */
+    interface EncryptionConfigurationProperty {
+        /**
+         * The encryption type to use.
+         *
+         * If you use the `KMS` encryption type, the contents of the repository will be encrypted using server-side encryption with AWS Key Management Service key stored in AWS  . When you use AWS  to encrypt your data, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you already created.
+         *
+         * If you use the `KMS_DSSE` encryption type, the contents of the repository will be encrypted with two layers of encryption using server-side encryption with the AWS  Management Service key stored in AWS  . Similar to the `KMS` encryption type, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you've already created.
+         *
+         * If you use the `AES256` encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm.
+         *
+         * For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide* .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-encryptionconfiguration.html#cfn-ecr-repository-encryptionconfiguration-encryptiontype
+         */
+        readonly encryptionType?: string;
+        /**
+         * If you use the `KMS` encryption type, specify the AWS  key to use for encryption.
+         *
+         * The alias, key ID, or full ARN of the AWS  key can be specified. The key must exist in the same Region as the repository. If no key is specified, the default AWS managed AWS  key for Amazon ECR will be used.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-encryptionconfiguration.html#cfn-ecr-repository-encryptionconfiguration-kmskey
+         */
+        readonly kmsKey?: kmsRefs.IKeyRef | string;
+    }
+    /**
+     * The `LifecyclePolicy` property type specifies a lifecycle policy.
+     *
+     * For information about lifecycle policy syntax, see [Lifecycle policy template](https://docs.aws.amazon.com/AmazonECR/latest/userguide/LifecyclePolicies.html) in the *Amazon ECR User Guide* .
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-lifecyclepolicy.html
+     */
+    interface LifecyclePolicyProperty {
+        /**
+         * The JSON repository policy text to apply to the repository.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-lifecyclepolicy.html#cfn-ecr-repository-lifecyclepolicy-lifecyclepolicytext
+         */
+        readonly lifecyclePolicyText?: string;
+        /**
+         * The AWS account ID associated with the registry that contains the repository.
+         *
+         * If you do not specify a registry, the default registry is assumed.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-lifecyclepolicy.html#cfn-ecr-repository-lifecyclepolicy-registryid
+         */
+        readonly registryId?: string;
+    }
+    /**
+     * A filter that specifies which image tags should be excluded from the repository's image tag mutability setting.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-imagetagmutabilityexclusionfilter.html
+     */
+    interface ImageTagMutabilityExclusionFilterProperty {
+        /**
+         * Specifies the type of filter to use for excluding image tags from the repository's mutability setting.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-imagetagmutabilityexclusionfilter.html#cfn-ecr-repository-imagetagmutabilityexclusionfilter-imagetagmutabilityexclusionfiltertype
+         */
+        readonly imageTagMutabilityExclusionFilterType?: string;
+        /**
+         * The value to use when filtering image tags.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repository-imagetagmutabilityexclusionfilter.html#cfn-ecr-repository-imagetagmutabilityexclusionfilter-imagetagmutabilityexclusionfiltervalue
+         */
+        readonly imageTagMutabilityExclusionFilterValue?: string;
+    }
+}
+/**
+ * Properties for CfnRepositoryPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html
+ */
+export interface CfnRepositoryMixinProps {
+    /**
+     * If true, deleting the repository force deletes the contents of the repository.
+     *
+     * If false, the repository must be empty before attempting to delete it.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html#cfn-ecr-repository-emptyondelete
+     */
+    readonly emptyOnDelete?: boolean | cdk.IResolvable;
+    /**
+     * The encryption configuration for the repository.
+     *
+     * This determines how the contents of your repository are encrypted at rest.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html#cfn-ecr-repository-encryptionconfiguration
+     */
+    readonly encryptionConfiguration?: CfnRepositoryPropsMixin.EncryptionConfigurationProperty | cdk.IResolvable;
+    /**
+     * > The `imageScanningConfiguration` parameter is being deprecated, in favor of specifying the image scanning configuration at the registry level.
+     *
+     * For more information, see `PutRegistryScanningConfiguration` .
+     *
+     * The image scanning configuration for the repository. This determines whether images are scanned for known vulnerabilities after being pushed to the repository.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html#cfn-ecr-repository-imagescanningconfiguration
+     */
+    readonly imageScanningConfiguration?: CfnRepositoryPropsMixin.ImageScanningConfigurationProperty | cdk.IResolvable;
+    /**
+     * The tag mutability setting for the repository.
+     *
+     * If this parameter is omitted, the default setting of `MUTABLE` will be used which will allow image tags to be overwritten. If `IMMUTABLE` is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html#cfn-ecr-repository-imagetagmutability
+     */
+    readonly imageTagMutability?: string;
+    /**
+     * A list of filters that specify which image tags are excluded from the repository's image tag mutability setting.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html#cfn-ecr-repository-imagetagmutabilityexclusionfilters
+     */
+    readonly imageTagMutabilityExclusionFilters?: Array<CfnRepositoryPropsMixin.ImageTagMutabilityExclusionFilterProperty | cdk.IResolvable> | cdk.IResolvable;
+    /**
+     * Creates or updates a lifecycle policy.
+     *
+     * For information about lifecycle policy syntax, see [Lifecycle policy template](https://docs.aws.amazon.com/AmazonECR/latest/userguide/LifecyclePolicies.html) .
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html#cfn-ecr-repository-lifecyclepolicy
+     */
+    readonly lifecyclePolicy?: cdk.IResolvable | CfnRepositoryPropsMixin.LifecyclePolicyProperty;
+    /**
+     * The name to use for the repository.
+     *
+     * The repository name may be specified on its own (such as `nginx-web-app` ) or it can be prepended with a namespace to group the repository into a category (such as `project-a/nginx-web-app` ). If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the repository name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) .
+     *
+     * The repository name must start with a letter and can only contain lowercase letters, numbers, hyphens, underscores, and forward slashes.
+     *
+     * > If you specify a name, you cannot perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html#cfn-ecr-repository-repositoryname
+     */
+    readonly repositoryName?: string;
+    /**
+     * The JSON repository policy text to apply to the repository.
+     *
+     * For more information, see [Amazon ECR repository policies](https://docs.aws.amazon.com/AmazonECR/latest/userguide/repository-policy-examples.html) in the *Amazon Elastic Container Registry User Guide* .
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html#cfn-ecr-repository-repositorypolicytext
+     */
+    readonly repositoryPolicyText?: any | cdk.IResolvable;
+    /**
+     * An array of key-value pairs to apply to this resource.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html#cfn-ecr-repository-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+}
+/**
+ * The ARN of the IAM principal to remove from the pull time update exclusion list.
+ *
+ * @cloudformationResource AWS::ECR::PullTimeUpdateExclusion
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pulltimeupdateexclusion.html
+ */
+export declare class CfnPullTimeUpdateExclusionPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnPullTimeUpdateExclusionMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::ECR::PullTimeUpdateExclusion`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnPullTimeUpdateExclusionMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnPullTimeUpdateExclusion;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnPullTimeUpdateExclusionPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pulltimeupdateexclusion.html
+ */
+export interface CfnPullTimeUpdateExclusionMixinProps {
+    /**
+     * The ARN of the IAM principal to remove from the pull time update exclusion list.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-pulltimeupdateexclusion.html#cfn-ecr-pulltimeupdateexclusion-principalarn
+     */
+    readonly principalArn?: string;
+}
+/**
+ * The scanning configuration for a private registry.
+ *
+ * @cloudformationResource AWS::ECR::RegistryScanningConfiguration
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-registryscanningconfiguration.html
+ */
+export declare class CfnRegistryScanningConfigurationPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnRegistryScanningConfigurationMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::ECR::RegistryScanningConfiguration`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnRegistryScanningConfigurationMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnRegistryScanningConfiguration;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnRegistryScanningConfigurationPropsMixin {
+    /**
+     * The scanning rules associated with the registry.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-registryscanningconfiguration-scanningrule.html
+     */
+    interface ScanningRuleProperty {
+        /**
+         * The details of a scanning repository filter.
+         *
+         * For more information on how to use filters, see [Using filters](https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning.html#image-scanning-filters) in the *Amazon Elastic Container Registry User Guide* .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-registryscanningconfiguration-scanningrule.html#cfn-ecr-registryscanningconfiguration-scanningrule-repositoryfilters
+         */
+        readonly repositoryFilters?: Array<cdk.IResolvable | CfnRegistryScanningConfigurationPropsMixin.RepositoryFilterProperty> | cdk.IResolvable;
+        /**
+         * The frequency that scans are performed at for a private registry.
+         *
+         * When the `ENHANCED` scan type is specified, the supported scan frequencies are `CONTINUOUS_SCAN` and `SCAN_ON_PUSH` . When the `BASIC` scan type is specified, the `SCAN_ON_PUSH` scan frequency is supported. If scan on push is not specified, then the `MANUAL` scan frequency is set by default.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-registryscanningconfiguration-scanningrule.html#cfn-ecr-registryscanningconfiguration-scanningrule-scanfrequency
+         */
+        readonly scanFrequency?: string;
+    }
+    /**
+     * The filter settings used with image replication.
+     *
+     * Specifying a repository filter to a replication rule provides a method for controlling which repositories in a private registry are replicated. If no filters are added, the contents of all repositories are replicated.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-registryscanningconfiguration-repositoryfilter.html
+     */
+    interface RepositoryFilterProperty {
+        /**
+         * The filter to use when scanning.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-registryscanningconfiguration-repositoryfilter.html#cfn-ecr-registryscanningconfiguration-repositoryfilter-filter
+         */
+        readonly filter?: string;
+        /**
+         * The type associated with the filter.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-registryscanningconfiguration-repositoryfilter.html#cfn-ecr-registryscanningconfiguration-repositoryfilter-filtertype
+         */
+        readonly filterType?: string;
+    }
+}
+/**
+ * Properties for CfnRegistryScanningConfigurationPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-registryscanningconfiguration.html
+ */
+export interface CfnRegistryScanningConfigurationMixinProps {
+    /**
+     * The scanning rules associated with the registry.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-registryscanningconfiguration.html#cfn-ecr-registryscanningconfiguration-rules
+     */
+    readonly rules?: Array<cdk.IResolvable | CfnRegistryScanningConfigurationPropsMixin.ScanningRuleProperty> | cdk.IResolvable;
+    /**
+     * The type of scanning configured for the registry.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-registryscanningconfiguration.html#cfn-ecr-registryscanningconfiguration-scantype
+     */
+    readonly scanType?: string;
+}
+/**
+ * The details of the repository creation template associated with the request.
+ *
+ * @cloudformationResource AWS::ECR::RepositoryCreationTemplate
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html
+ */
+export declare class CfnRepositoryCreationTemplatePropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnRepositoryCreationTemplateMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::ECR::RepositoryCreationTemplate`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnRepositoryCreationTemplateMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnRepositoryCreationTemplate;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnRepositoryCreationTemplatePropsMixin {
+    /**
+     * A filter that specifies which image tags should be excluded from the repository's image tag mutability setting.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-imagetagmutabilityexclusionfilter.html
+     */
+    interface ImageTagMutabilityExclusionFilterProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-imagetagmutabilityexclusionfilter.html#cfn-ecr-repositorycreationtemplate-imagetagmutabilityexclusionfilter-imagetagmutabilityexclusionfiltertype
+         */
+        readonly imageTagMutabilityExclusionFilterType?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-imagetagmutabilityexclusionfilter.html#cfn-ecr-repositorycreationtemplate-imagetagmutabilityexclusionfilter-imagetagmutabilityexclusionfiltervalue
+         */
+        readonly imageTagMutabilityExclusionFilterValue?: string;
+    }
+    /**
+     * The encryption configuration for the repository. This determines how the contents of your repository are encrypted at rest.
+     *
+     * By default, when no encryption configuration is set or the `AES256` encryption type is used, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts your data at rest using an AES256 encryption algorithm. This does not require any action on your part.
+     *
+     * For more control over the encryption of the contents of your repository, you can use server-side encryption with AWS Key Management Service key stored in AWS Key Management Service ( AWS  ) to encrypt your images. For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide* .
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-encryptionconfiguration.html
+     */
+    interface EncryptionConfigurationProperty {
+        /**
+         * The encryption type to use.
+         *
+         * If you use the `KMS` encryption type, the contents of the repository will be encrypted using server-side encryption with AWS Key Management Service key stored in AWS  . When you use AWS  to encrypt your data, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you already created.
+         *
+         * If you use the `KMS_DSSE` encryption type, the contents of the repository will be encrypted with two layers of encryption using server-side encryption with the AWS  Management Service key stored in AWS  . Similar to the `KMS` encryption type, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you've already created.
+         *
+         * If you use the `AES256` encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm.
+         *
+         * For more information, see [Amazon ECR encryption at rest](https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html) in the *Amazon Elastic Container Registry User Guide* .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-encryptionconfiguration.html#cfn-ecr-repositorycreationtemplate-encryptionconfiguration-encryptiontype
+         */
+        readonly encryptionType?: string;
+        /**
+         * If you use the `KMS` encryption type, specify the AWS  key to use for encryption.
+         *
+         * The alias, key ID, or full ARN of the AWS  key can be specified. The key must exist in the same Region as the repository. If no key is specified, the default AWS managed AWS  key for Amazon ECR will be used.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-repositorycreationtemplate-encryptionconfiguration.html#cfn-ecr-repositorycreationtemplate-encryptionconfiguration-kmskey
+         */
+        readonly kmsKey?: string;
+    }
+}
+/**
+ * Properties for CfnRepositoryCreationTemplatePropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html
+ */
+export interface CfnRepositoryCreationTemplateMixinProps {
+    /**
+     * A list of enumerable Strings representing the repository creation scenarios that this template will apply towards.
+     *
+     * The supported scenarios are PULL_THROUGH_CACHE, REPLICATION, and CREATE_ON_PUSH
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html#cfn-ecr-repositorycreationtemplate-appliedfor
+     */
+    readonly appliedFor?: Array<string>;
+    /**
+     * The ARN of the role to be assumed by Amazon ECR.
+     *
+     * Amazon ECR will assume your supplied role when the customRoleArn is specified. When this field isn't specified, Amazon ECR will use the service-linked role for the repository creation template.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html#cfn-ecr-repositorycreationtemplate-customrolearn
+     */
+    readonly customRoleArn?: string;
+    /**
+     * The description associated with the repository creation template.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html#cfn-ecr-repositorycreationtemplate-description
+     */
+    readonly description?: string;
+    /**
+     * The encryption configuration associated with the repository creation template.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html#cfn-ecr-repositorycreationtemplate-encryptionconfiguration
+     */
+    readonly encryptionConfiguration?: CfnRepositoryCreationTemplatePropsMixin.EncryptionConfigurationProperty | cdk.IResolvable;
+    /**
+     * The tag mutability setting for the repository.
+     *
+     * If this parameter is omitted, the default setting of `MUTABLE` will be used which will allow image tags to be overwritten. If `IMMUTABLE` is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html#cfn-ecr-repositorycreationtemplate-imagetagmutability
+     */
+    readonly imageTagMutability?: string;
+    /**
+     * A list of filters that specify which image tags are excluded from the repository creation template's image tag mutability setting.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html#cfn-ecr-repositorycreationtemplate-imagetagmutabilityexclusionfilters
+     */
+    readonly imageTagMutabilityExclusionFilters?: Array<CfnRepositoryCreationTemplatePropsMixin.ImageTagMutabilityExclusionFilterProperty | cdk.IResolvable> | cdk.IResolvable;
+    /**
+     * The lifecycle policy to use for repositories created using the template.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html#cfn-ecr-repositorycreationtemplate-lifecyclepolicy
+     */
+    readonly lifecyclePolicy?: string;
+    /**
+     * The repository namespace prefix associated with the repository creation template.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html#cfn-ecr-repositorycreationtemplate-prefix
+     */
+    readonly prefix?: string;
+    /**
+     * The repository policy to apply to repositories created using the template.
+     *
+     * A repository policy is a permissions policy associated with a repository to control access permissions.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html#cfn-ecr-repositorycreationtemplate-repositorypolicy
+     */
+    readonly repositoryPolicy?: string;
+    /**
+     * The metadata to apply to the repository to help you categorize and organize.
+     *
+     * Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repositorycreationtemplate.html#cfn-ecr-repositorycreationtemplate-resourcetags
+     */
+    readonly resourceTags?: Array<cdk.CfnTag | cdk.IResolvable> | cdk.IResolvable;
+}
+/**
+ * The signing configuration for a registry, which specifies rules for automatically signing images when pushed.
+ *
+ * @cloudformationResource AWS::ECR::SigningConfiguration
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html
+ */
+export declare class CfnSigningConfigurationPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnSigningConfigurationMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::ECR::SigningConfiguration`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnSigningConfigurationMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnSigningConfiguration;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnSigningConfigurationPropsMixin {
+    /**
+     * A signing rule that specifies a signing profile and optional repository filters.
+     *
+     * When an image is pushed to a matching repository, a signing job is created using the specified profile.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-rule.html
+     */
+    interface RuleProperty {
+        /**
+         * A list of repository filters that determine which repositories have their images signed on push.
+         *
+         * If no filters are specified, all images pushed to the registry are signed using the rule's signing profile. Maximum of 100 filters per rule.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-rule.html#cfn-ecr-signingconfiguration-rule-repositoryfilters
+         */
+        readonly repositoryFilters?: Array<cdk.IResolvable | CfnSigningConfigurationPropsMixin.RepositoryFilterProperty> | cdk.IResolvable;
+        /**
+         * The ARN of the AWS Signer signing profile to use for signing images that match this rule.
+         *
+         * For more information about signing profiles, see [Signing profiles](https://docs.aws.amazon.com/signer/latest/developerguide/signing-profiles.html) in the *AWS Signer Developer Guide* .
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-rule.html#cfn-ecr-signingconfiguration-rule-signingprofilearn
+         */
+        readonly signingProfileArn?: string;
+    }
+    /**
+     * A repository filter used to determine which repositories have their images automatically signed on push.
+     *
+     * Each filter consists of a filter type and filter value.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-repositoryfilter.html
+     */
+    interface RepositoryFilterProperty {
+        /**
+         * The filter value used to match repository names.
+         *
+         * When using `WILDCARD_MATCH` , the `*` character matches any sequence of characters.
+         *
+         * Examples:
+         *
+         * - `myapp/*` - Matches all repositories starting with `myapp/`
+         * - `* /production` - Matches all repositories ending with `/production`
+         * - `*prod*` - Matches all repositories containing `prod`
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-repositoryfilter.html#cfn-ecr-signingconfiguration-repositoryfilter-filter
+         */
+        readonly filter?: string;
+        /**
+         * The type of filter to apply.
+         *
+         * Currently, only `WILDCARD_MATCH` is supported, which uses wildcard patterns to match repository names.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecr-signingconfiguration-repositoryfilter.html#cfn-ecr-signingconfiguration-repositoryfilter-filtertype
+         */
+        readonly filterType?: string;
+    }
+}
+/**
+ * Properties for CfnSigningConfigurationPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html
+ */
+export interface CfnSigningConfigurationMixinProps {
+    /**
+     * A list of signing rules.
+     *
+     * Each rule defines a signing profile and optional repository filters that determine which images are automatically signed.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-signingconfiguration.html#cfn-ecr-signingconfiguration-rules
+     */
+    readonly rules?: Array<cdk.IResolvable | CfnSigningConfigurationPropsMixin.RuleProperty> | cdk.IResolvable;
+}